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PROSECUTION ON THE MERITS Ig CLOSED . THIS NOTICE OF ALLOWANCE IS NOT A GRANT OF PATENT RIGHTS. 
THIS APPLICATION IS SUBJECT TO WITHDRAWAL FROM ISSUE AT THE INITIATIVE OF THE OFFICE OR UPON 
PETITION BY THE APPLICANT. SEE 37 CFR 1.313 AND MPEP 1308. 

THE ISSUE FEE AND PUBLICATION FEE (IF REQUIRED) MUST BE PAID WITHIN THREE MONTHS FROM THE 
MAILING DATE OF THIS NOTICE OR THIS APPLICATION SHALL BE REGARDED AS ABANDONED. THIS 
STATUTORY PERIOD CANNOT BE EXTENDED . SEE 35 U.S.C. 151. THE ISSUE FEE DUE INDICATED ABOVE DOES 
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Fee(s) Transmittal and pay the PUBLICATION FEE (if required) 
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Transmittal and pay the PUBLICATION FEE (if required) and 1/2 
the ISSUE FEE shown above. 



II. PART B - FEE(S) TRANSMITTAL, or its equivalent, must be completed and returned to the United States Patent and Trademark Office 
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P.O. Box 1450 
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CLASS-SUBCLASS 



2. For printing on the patent front page, list 



(2) the name of a single firm (having 
registered attorney or agent) and the r 
2 registered patent attorneys or agents 
listed, no name will be printed. 



3. ASSIGNEE NAME AND RESIDENCE DATA TO BE PRINTED ON THE PATENT (print or type) 
PLEASE NO' 
recordation as 

(A) NAME OF ASSIGNEE (B) RESIDENCE: (CITY and STATE OR COUNTRY) 



Please check the appropriate assignee category or categories (will not be printed on the patent) : Q Individual Q Corporation or other private group entity Q Government 

4a. The following fee(s) are submitted: 4b. Payment of Fee(s): (Please first reapply any previously paid issue fee shown above) 

Q Issue Fee Q A check is enclosed. 

□ Pubhcation Fee (No small entity discount permitted) □ Payment by credit card. Form PTO-2038 is attached. 

Q Advance Order - # of Copies 



overpayment, to Deposit Account Number _ 



5. Change in Entity Status (from status indicated above) 

□ a. AppUcant claims SMALL ENTITY status. See 37 CFR 1.27. □ b. Applicant is no longer claiming SMALL ENTITY status. See 37 CFR 1.27(g)(2). 



3r the assignee or other party in 



Authorized Signature _ 
Typed or printed name _ 



This collection of information is required by 37 CFR 1.31 1. The information is required to obtain or retain a benefit by the pubhc which is to file (and by the USPTO to process) 
an apphcation. Confidentiality is governed by 35 U.S.C. 122 and 37 CFR 1.14. This collection is estimated to take 12 minutes to complete, including gathering, preparing, and 
submitting the completed apphcation form to the USPTO. Time will vary depending upon the individual case. Any comments on the amount of time you require to complete 
this form and/or suggestions for reducing this burden, should be sent to the Chief Intormation Officer, U.S. Patent and Trademark Office, U.S. Department of Commerce, P.O. 
Box 1450, Alexandria, Virginia 22313-1450. DO NOT SEND FEES OR COMPLETED FORMS TO THIS ADDRESS. SEND TO: Commissioner for Patents, P.O. Box 1450, 
Alexandria, Virginia 22313-1450. 

Under the Paperwork Reduction Act of 1995, no persons are required to respond to a collection of information unless it displays a valid OMB control number. 
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APPLICATION NO. FILING DATE FIRST NAMED INVENTOR ATTORNEY DOCKET NO. CONFIRMATION NO. 



01/30/2004 

01/28/2010 



HOANG, DANIEL L 



LEE & HAYES, PLLC 

601 W. RIVERSIDE AVENUE I art unit | paper number 

SUITE 1400 ' — ' 

SPOKANE, WA 99201 MAILED: 01/28/2010 



Determination of Patent Term Adjustment mider 35 U.S.C. 154 (b) 

(application filed on or after May 29, 2000) 

The Patent Term Adjustment to date is 566 day(s). If the issue fee is paid on the date that is three months after the 
mailing date of this notice and the patent issues on the Tuesday before the date that is 28 weeks (six and a half 
months) after the mailing date of this notice, the Patent Term Adjustment will be 566 day(s). 

If a Continued Prosecution Application (CPA) was filed in the above-identified application, the filing date that 
determines Patent Term Adjustment is the filing date of the most recent CPA. 

Applicant will be able to obtain more detailed information by accessing the Patent Application Information Retrieval 
(PAIR) WEB site (http://pair.uspto.gov). 

Any questions regarding the Patent Term Extension or Adjustment determination should be directed to the Office of 
Patent Legal Administration at (571)-272-7702. Questions relating to issue and publication fee payments should be 
directed to the Customer Service Center of the Office of Patent Publication at l-(888)-786-0101 or 
(571)-272-4200. 
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Application No. 


Applicant(s) 


Notice of Allowability 


10/769,106 


COSTEA ET AL. 


Examiner 


Art Unit 






DANIEL L. HOANG 


2436 





~ The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 
All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1 308. 

1 . This communication is responsive to 9/28/09 . 

2. ^ The allowed claim(s) is/are 1.6-8.13.14.17-21 and 23-29 . 

3. □ Acknowledgment is madeof a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a) □ All b) □ Some* c) □ None of the: 

1 . □ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-IUIONTH PERIOD IS NOT EXTENDABLE. 

4. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

5. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1 ) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date . 

Identifying indicia such as the application number (see 37 CFR 1.84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 

6. □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the 

attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL. 



Attachment(s) 

1 . □ Notice of References Cited (PTO-892) 

2. □ Notice of Draftperson's Patent Drawing Review (PTO-948) 

3. □ Information Disclosure Statements (PTO/SB/08), 

Paper No./Mail Date 

4. □ Examiner's Comment Regarding Requirement for Deposit 

of Biological Material 



5. □ Notice of Informal Patent Application 

6. □ Interview Summary (PTO-413), 

Paper No./Mail Date . 

7. M Examiner's Amendment/Comment 

8. 13 Examiner's Statement of Reasons for Allowance 
9. □ Other . 



/Daniel L. Hoang/ 
Examiner, Art Unit 2436 



Notice of Allowability 



Part of Paper No./Mail Date 201001 14 
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DETAILED ACTION 



STATUS OF THE CLAIMS 

1. Claims 1, 6-8, 13-14, 17-21, and 23-29 were previously pending as per the previous office action. 

2. Claims 1, 6-8, 13-14, 17-21, and 23-29 are currently pending. 

3. Claims 1, 6-8, 13-14, 17-21, and 23-29 are allowed. 



EXAMINER'S AMENDMENT 

An examiner's amendment to the record appears below. Should the changes and/or additions be 
unacceptable to applicant, an amendment may be filed as provided by 37 CFR 1.312. To ensure 
consideration of such an amendment, it MUST be submitted no later than the payment of the issue fee. 

Authorization for this examiner's amendment was given in a telephone interview with David 
Thompson on 1/14/2010. (509)944-4735 

The application has been amended as follows: 

In the claims: 
Claim 1: 

Line 1 1 : "executable code exists within the input file," has been changed to "executable 
code exists within the input file, wherein the executable code determined to exist 
comprises both executable statements currently known, and not currently known, to be 
malicious code. ". 
Claim 14: 

Line 16: "available , to determine if the input file contains executable code" has been 
changed to " . wherein the executable code determined to exist comprises both 
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executable statements currently known, and not currently known, to be malicious code ". 
Claim 21: 

Line 4: "file format selected from among a group of data file formats" has been changed 
to "file format selected from among a group of data file formats , and wherein the 
compound parser is extensible, and wherein extending the compound parser comprises 
adding an additional component parser configured to recognize an additional file format 
and executable code if present in a file of the additional file format :". 
Line 7: "input file" has been changed to "input file , wherein the executable code 
recognized comprises both executable statements currently known, and not currently 
known, to be malicious code , and " 



EXAMINER'S STATEMENT OF REASONS FOR ALLOWANCE 



Prior art was found which disclosed: 

A processor-readable medium comprising processor-executable instructions for: 

parsing an input file to recognize a file format of the input file, wherein the parsing repeatedly 

parses once with each of a plurality of component parsers contained within a compound 
parser, wherein each of the plurality of component parsers is configured for recognition of 
a specific file format by which an input file is configured, wherein the compound parser is 
extensible, and wherein extending the compound parser comprises adding an additional 
component parser configured to recognize an additional file format and executable code 
if present in a file of the additional file format; 
checking contents of the input file, according to the recognized file format, to determine whether 

executable code exists within the input file, 
continuing to parse the input file until a component parser recognizes the file format of the input 
file or until all available component parsers within the compound parser have parsed the 
input file; and 

sending a status in response to results of said checking, wherein sending a status comprises 
further instructions for: 

sending a file-has-no-code status when the file format of the input file was recognized 

and no executable code was found; 
sending a file-has-code status when executable code was found; and 
sending a don't-know status when the file format of the input file was not recognized; 
wherein adding an additional component parser comprises instructions for: 

identifying a new file format, wherein ability to recognize the new file format is 

functionality to be extended to the compound parser; 
configuring a new component parser according to the new file format, wherein the new 

component parser is configured to recognize files of the new format and also to 
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recognize executable code in files of the new format by locating executable code 
that is inconsistent with the new file format; and 
extending functionality of the compound parser by adding the new component parser to 

the compound parser. 

The following is exanniner's statement of reasons for allowance: 

The prior art of record does not teach or render obvious the limitations as recited in independent claims 1 , 

14, and 21 of the currently submitted claims, specific to 

"checking contents of the input file, according to the recognized file format, to determine whether 
executable code exists within the input file, wherein the executable code determined to exist 
comprises both executable statements currently known, and not currently known, to be malicious 
code, and wherein the checking comprises detecting executable code because its location within 
the input file is inconsistent with the recognized file format" 

Claims 6-8, 13, 17-20, and 23-29 depend on independent claims 1, 14, and 21. Dependent claims are 
allowable as they depend from an allowable independent claim. 

Any comments considered necessary by applicant must be submitted no later than the payment of the 

issue fee and, to avoid processing delays, should preferably accompany the issue fee. Such submissions 
should be clearly labeled "Comments on Statement of Reasons for Allowance". 

POINTS OF CONTACT 

*. Any response to this Office Action should be faxed to (571 ) 273-8300 or mailed to: 

Commissioner for Patents 
P.O. Box 1450 
Alexandria, VA 22313-1450 



Hand-delivered responses should be brought to 

Customer Service Window 
Randolph Building 
401 Dulaney Street 
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Alexandria, VA 22314 

Any inquiry concerning tliis communication or earlier communications from the examiner should 
be directed to Daniel L. Hoang whose telephone number is 571-270-1019. The examiner can normally 
be reached on Monday - Thursday, 8:00 a.m. - 5:00 p.m., EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Nasser Moazzami can be reached on 571-272-4195. The fax phone number for the organization where 
this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the Patent Application 
Information Retrieval (PAIR) system. Status information for published applications may be obtained from 
either Private PAIR or Public PAIR. Status information for unpublished applications is available through 
Private PAIR only. For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic Business Center (EBC) 
at 866-217-9197 (toll-free). 

/Daniel L. Hoang/ 
Examiner, Art Unit 2436 

/Nasser Moazzami/ 

Supervisory Patent Examiner, Art Unit 2436 



